crypto

crypto copied to clipboard

Upgrade to Go JOSE v4

1

### What would you like to be added? Upgrade to Go JOSE v4 ### Why this is needed Tracking issue for upgrading this in due time. It was released in...

hslatman

[Bug]: Yubikey AES management keys

1

### Steps to Reproduce 1. Have a yubikey with an AES128, AES192, or AES256 management key. 1. Generated with `ykman piv access change-management-key -t -g -a AES256` 2. Try to...

scj643

This commit adds a simple support for Azure Key Vault Managed HSM by adding `managedhsm=true` to the key vault uri. Currently, this commit doesn't enforce the protection level HSM, but...

maraino

Update attestation for a key

1

Currently a new key has to be created every time a new certificate is authorized with the acme device attestation protocol. This allows a new attestation to be generated with...

areed

Look into and/or implement OpenTelemetry context propagation

1

### What would you like to be added After merging https://github.com/smallstep/crypto/pull/391 we now include https://github.com/googleapis/google-api-go-client/pull/2127. This allows OpenTelemetry context to be propagated through to GCP. `crypto` is probably not the...

hslatman

Microsoft TPM Simulator TCTI (WIP)

1

hslatman

### What would you like to be added An option to initialize a KMS ignoring initialization errors related to side effects. ### Why this is needed When a KMS is...

hslatman

go-cloud based uris

2

### Description Add support to [go-cloud](https://gocloud.dev) style URIs compatible with [cosign](https://docs.sigstore.dev/cosign/kms_support/)

maraino

### Description Some KMS will support symmetric ciphers PKCS#11 is one of them. We will probably need to add something like: ```golang type Cipher interface { CreateCipher(req *CreateCipherRequest) (*CreateCipherResponse, error)...

maraino

dopey